Is your feature request related to a problem? Please describe.
A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]

Describe the solution you'd like
A clear and concise description of what you want to happen.

Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.

Additional context
Add any other context or screenshots about the feature request here.

Is your feature request related to a problem? Please describe.
A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]

Describe the solution you'd like
A clear and concise description of what you want to happen.

Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.

Additional context
Add any other context or screenshots about the feature request here.

Is your feature request related to a problem? Please describe.
Add new control ses_configuration_set_tls_enforced

Describe the solution you'd like
A clear and concise description of what you want to happen.

Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.

Additional context
Add any other context or screenshots about the feature request here.

Reference: https://github.com/turbot/steampipe-mod-terraform-aws-compliance/blob/main/query/apigateway/apigateway_stage_logging_enabled.sql#L54

This is the case for multiple queries.

So, the dimension key in the result json is the postgresql default: $column$

Is your feature request related to a problem? Please describe.
A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]

Describe the solution you'd like
A clear and concise description of what you want to happen.

Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.

Additional context
Add any other context or screenshots about the feature request here.

we have vpc_network_acl_allow_ssh_port_22_ingress but when scanning this example code (from https://spacelift.io/blog/iac-scanning) there was no complaint

resource "aws_security_group" "example_sg" {
  name        = "public_sg"
  description = "public security group"
  vpc_id      = aws_vpc.example_vpc.id
  ingress {
    from_port   = 22
    to_port     = 22
    protocol    = "tcp"
    cidr_blocks = ["0.0.0.0/0"]
  }

  egress {
    from_port   = 0
    to_port     = 0
    protocol    = "-1"
    cidr_blocks = ["0.0.0.0/0"]
  }
}

Is your feature request related to a problem? Please describe.
A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]

Describe the solution you'd like
A clear and concise description of what you want to happen.

Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.

Additional context
Add any other context or screenshots about the feature request here.

Describe the bug
The current version of the mod returns a warning due to using the deprecated option version instead of min_version for the terraform plugin.

This issue can be trivially resolved by updating

  requires {
    plugin "terraform" {
      version = "0.0.5"
    }
  }

to

  requires {
    plugin "terraform" {
      min_version = "0.0.5"
    }
  }

Steampipe version (steampipe -v)
Example: v0.3.0

Plugin version (steampipe plugin list)
Example: v0.5.0

To reproduce
Steps to reproduce the behavior (please include relevant code and/or commands).

Expected behavior
A clear and concise description of what you expected to happen.

Additional context
Add any other context about the problem here.

Currently, the controls use the argument column from table terraform_resource to get the resource attributes and perform the checks.

Based on the latest Terraform plugin changes, the plugin introduces 3 new columns for the table terraform_resource.

• address - The absolute address of the resource. It will help identify the resources created using "count" or "for_each".
• attributes - The resource attributes. Only populates in case of populating data from a terraform state file.
• attributes_std - Similar to the existing arguments column and the newly added attributes column. The column will have the value either from the arguments column (in case of parsing the TF configuration file and TF plan files) or from the attributes column (in case of parsing TF state files).

The compliance controls will use the newly added attributes_std column instead of argument for better support for the terraform state file.

Is your feature request related to a problem? Please describe.
Add below new controls:

• docdb_cluster_backup_retention_enabled
• lambda_function_restricted_service_permission
• neptune_cluster_backup_retention_enabled
• neptune_db_clusters_copy_tags_to_snapshots_enabled
• neptune_db_clusters_iam_database_authentication_enabled

Describe the solution you'd like
A clear and concise description of what you want to happen.

Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.

Additional context
Add any other context or screenshots about the feature request here.

Describe the bug
A clear and concise description of what the bug is.

CloudFront distributions should have origin access identity enabled
cannot extract elements from an object (SQLSTATE 22023)

Steampipe version (steampipe -v)
Example: v0.3.0

Plugin version (steampipe plugin list)
Example: v0.5.0

To reproduce
Steps to reproduce the behavior (please include relevant code and/or commands).

Expected behavior
A clear and concise description of what you expected to happen.

Additional context
Add any other context about the problem here.

Describe the bug
A clear and concise description of what the bug is.

The query > uses endpoint_public_access, which is moved to vpc_config under terraform Resource: aws_eks_cluster

Additionally,

• it's missing a null check if not provided; the default remains **true**
  [endpoint_public_access(https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/eks_cluster#endpoint_public_access) - (Optional) Whether the Amazon EKS public API server endpoint is enabled. Default is true

• Also, it should check the public_access_cidrs match none other than 0.0.0.0/0

• public_access_cidrs - (Optional) List of CIDR blocks. Indicates which CIDR blocks can access the Amazon EKS public API server endpoint when enabled. EKS defaults this to a list with 0.0.0.0/0. Terraform will only perform drift detection of its value when present in a configuration.

 vpc_config {
    subnet_ids             = [aws_subnet.named_test_resource1.id, aws_subnet.named_test_resource2.id]
    endpoint_public_access = true ### (Optional) Whether the Amazon EKS public API server endpoint is enabled. Default is true
    public_access_cidrs = ["0.0.0.0/0"] ### Accessible from internet
  }

Steampipe version (steampipe -v)
Example: v0.3.0

Plugin version (steampipe plugin list)
Example: v0.5.0

To reproduce
Steps to reproduce the behavior (please include relevant code and/or commands).

Expected behavior
A clear and concise description of what you expected to happen.

Additional context
Add any other context about the problem here.

Is your feature request related to a problem? Please describe.
A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]

Describe the solution you'd like
A clear and concise description of what you want to happen.

Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.

Additional context
Add any other context or screenshots about the feature request here.

Is your feature request related to a problem? Please describe.
A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]

Describe the solution you'd like
A clear and concise description of what you want to happen.

Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.

Additional context
Add any other context or screenshots about the feature request here.

It's simpler in code and readability to reference queries using the query = attribute rather than the sql = attribute.

This occurs throughout the mod, but as a specific example:

Could be changed from:

sql           = query.athena_database_encryption_at_rest_enabled.sql

to:

query         = query.athena_database_encryption_at_rest_enabled

Update SOC tags in AWS terraform compliance

Is your feature request related to a problem? Please describe.
A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]

Describe the solution you'd like
A clear and concise description of what you want to happen.

Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.

Additional context
Add any other context or screenshots about the feature request here.